Exploitation Summary
EIP tracks 3 public exploits for CVE-2003-1051. PoCs published by SNOSoft.
AI-analyzed exploit summary This exploit demonstrates a format string vulnerability in IBM DB2 binaries (db2govd, db2start, db2stop) that are installed setuid. A local attacker can leverage this to execute arbitrary code and escalate privileges.
Description
Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
Exploits (3)
This exploit demonstrates a format string vulnerability in IBM DB2 binaries (db2govd, db2start, db2stop) that are installed setuid. A local attacker can leverage this to execute arbitrary code and escalate privileges.
This exploit demonstrates a format string vulnerability in IBM DB2 binaries (db2govd, db2start, db2stop) that allows local privilege escalation due to improper handling of format specifiers in command-line parameters. The PoC shows how passing format strings like %x or %n%n can trigger crashes or arbitrary memory writes, potentially leading to elevated privileges.
This exploit demonstrates a format string vulnerability in IBM DB2 binaries (db2govd, db2start, db2stop) that can lead to local privilege escalation. The PoC shows how malformed input with format specifiers (%x, %n) causes segmentation faults, indicating exploitable conditions.